# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=94 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 95 --- ## [Export ingest pipeline](https://discuss.elastic.co/t/export-ingest-pipeline/374994)
**Author:** [@poke1710](https://discuss.elastic.co/u/poke1710)\ **Replies:** 1\ **Last updated:** [March 3, 2025, 8:23pm UTC](https://discuss.elastic.co/t/export-ingest-pipeline/374994 "2025-03-03T20:23:31Z")
Hello, We are looking to export the ingest pipeline in elk to a file so we can import it into another ELK system. Is there a way to do that? --- ## [Installing agent fail](https://discuss.elastic.co/t/installing-agent-fail/375326)
**Author:** [@Msquared](https://discuss.elastic.co/u/Msquared)\ **Replies:** 0\ **Last updated:** [March 3, 2025, 6:50pm UTC](https://discuss.elastic.co/t/installing-agent-fail/375326 "2025-03-03T18:50:08Z")
Hi All, I am trying to install agents on windows endpoints in my org but getting the following error, I am running PowerShell/command prompt as admin, but still seems to fail. "\[ \] Installing Elastic Agent... \[0s\] … --- ## [Need help with grok expression logstash](https://discuss.elastic.co/t/need-help-with-grok-expression-logstash/375313)
**Author:** [@Mohamed\_NOUISSEL](https://discuss.elastic.co/u/Mohamed_NOUISSEL)\ **Replies:** 4\ **Last updated:** [March 3, 2025, 5:54pm UTC](https://discuss.elastic.co/t/need-help-with-grok-expression-logstash/375313 "2025-03-03T17:54:51Z")
Hello, I am new to Logstash and Grok filters. My sample logs of glassfish server look like this: \[2025-03-02T17:17:00.722133Z\] \[GF 7.0.12\] \[INFO\] \[\] \[jakarta.enterprise.logging.stdout\] \[tid: \_ThreadID=693 \_ThreadName… --- ## [Logstash multiple conf files configuration is not working when passing fields between conf files](https://discuss.elastic.co/t/logstash-multiple-conf-files-configuration-is-not-working-when-passing-fields-between-conf-files/375299)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 6\ **Last updated:** [March 3, 2025, 5:02pm UTC](https://discuss.elastic.co/t/logstash-multiple-conf-files-configuration-is-not-working-when-passing-fields-between-conf-files/375299 "2025-03-03T17:02:37Z")
Hello, Currently a I have a single file as below which will do the following requirements: Step1: Get bearer token every minute Step2: Use bearer token and get Prometheus data stpe3: parsing Prometheus data Below si… --- ## [Logstash JDBC Input PREPARE on every run](https://discuss.elastic.co/t/logstash-jdbc-input-prepare-on-every-run/375312)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 2\ **Last updated:** [March 3, 2025, 3:56pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-prepare-on-every-run/375312 "2025-03-03T15:56:41Z")
Hi, Since upgrading from Logstash 8.7.1 to 8.17.2 I've noticed that the PREPARE statement is run every time (followed by the EXECUTE), where as previously PREPARE would run once at start up, and EXECUTE would run every … --- ## [Filter does not show all options in Kibana](https://discuss.elastic.co/t/filter-does-not-show-all-options-in-kibana/375211)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 4\ **Last updated:** [March 3, 2025, 3:34pm UTC](https://discuss.elastic.co/t/filter-does-not-show-all-options-in-kibana/375211 "2025-03-03T15:34:31Z")
Hello! I added a date filter on my dashboard to be able to filter information by the specific day It contains so far 410 days My problem is that if I click the filter it shows only 177 options available: Also, you… --- ## [Elastic Agent to Azure Event Hub RBAC/OAuth2 input plugin support](https://discuss.elastic.co/t/elastic-agent-to-azure-event-hub-rbac-oauth2-input-plugin-support/375316)
**Author:** [@miksonx](https://discuss.elastic.co/u/miksonx)\ **Replies:** 0\ **Last updated:** [March 3, 2025, 2:58pm UTC](https://discuss.elastic.co/t/elastic-agent-to-azure-event-hub-rbac-oauth2-input-plugin-support/375316 "2025-03-03T14:58:09Z")
Hi, As noticed on the documentation for Elastic Agent input plugin to Azure Event Hub only support "connection\_string". As security regulations require us to use RBAC/OAuth2 is there a plan to implement this functionali… --- ## [Logstash output](https://discuss.elastic.co/t/logstash-output/375237)
**Author:** [@JosephR](https://discuss.elastic.co/u/JosephR)\ **Replies:** 10\ **Last updated:** [March 3, 2025, 2:09pm UTC](https://discuss.elastic.co/t/logstash-output/375237 "2025-03-03T14:09:40Z")
I wrote a conf file and when it reads my ip addresses from the DB it outputs them as an integer instead of the ip address. I tried to do a mutate like the following: filter { mutate { convert =\> { "sourceipv4" =\> "st… --- ## [HDR percentile aggregation memory footprint](https://discuss.elastic.co/t/hdr-percentile-aggregation-memory-footprint/375297)
**Author:** [@mike123](https://discuss.elastic.co/u/mike123)\ **Replies:** 0\ **Last updated:** [March 3, 2025, 7:23am UTC](https://discuss.elastic.co/t/hdr-percentile-aggregation-memory-footprint/375297 "2025-03-03T07:23:33Z")
Hi, I was facing huge latency in t-digest percentile aggregations, So tried out HDR percentile aggregation. it was fast but in the documentation it is mentioned that "HDR Percentile aggregation has a larger memory foo… --- ## [How to make Elasticsearch REST calls with Postman given nothing but a Cloud ID and API Key?](https://discuss.elastic.co/t/how-to-make-elasticsearch-rest-calls-with-postman-given-nothing-but-a-cloud-id-and-api-key/375295)
**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\ **Replies:** 3\ **Last updated:** [March 3, 2025, 4:00am UTC](https://discuss.elastic.co/t/how-to-make-elasticsearch-rest-calls-with-postman-given-nothing-but-a-cloud-id-and-api-key/375295 "2025-03-03T04:00:03Z")
Hello, if I use the Elasticsearch SDK I can make API calls using nothing but a Cloud ID and API Key - how can I do the same with Postman, which requires a URL? Presumeably the SDK is converting the Cloud ID to a URL, bu… --- ## [How to improve the loading speed of Available fields after opening a data view in Discovery](https://discuss.elastic.co/t/how-to-improve-the-loading-speed-of-available-fields-after-opening-a-data-view-in-discovery/375136)
**Author:** [@Crush0908](https://discuss.elastic.co/u/Crush0908)\ **Replies:** 4\ **Last updated:** [March 3, 2025, 3:32am UTC](https://discuss.elastic.co/t/how-to-improve-the-loading-speed-of-available-fields-after-opening-a-data-view-in-discovery/375136 "2025-03-03T03:32:31Z")
My Kibana version is 8.13.2, and every time I open the data view, I can see Available fields and Meta fields spinning in circles. Can someone help me solve this problem？TKS --- ## [Can't do page turn in Kibana](https://discuss.elastic.co/t/cant-do-page-turn-in-kibana/375209)
**Author:** [@arT1](https://discuss.elastic.co/u/arT1)\ **Replies:** 4\ **Last updated:** [March 3, 2025, 1:12am UTC](https://discuss.elastic.co/t/cant-do-page-turn-in-kibana/375209 "2025-03-03T01:12:52Z")
Elastic Stack v8.13.3 Kibana v8.13.3 I have seventy-five services but I can't do page turn in APM, which makes me very upset When I click on the next page, the second page or the third page, I did not turn the page co… --- ## [Help needed for Kibana console Login](https://discuss.elastic.co/t/help-needed-for-kibana-console-login/373339)
**Author:** [@Seshadri\_Kommepalli](https://discuss.elastic.co/u/Seshadri_Kommepalli)\ **Replies:** 2\ **Last updated:** [March 2, 2025, 7:42pm UTC](https://discuss.elastic.co/t/help-needed-for-kibana-console-login/373339 "2025-03-02T19:42:33Z")
I installed Elastic Search and Kibana and trying to =figure it out what is kibana console URL to login --- ## [error while installing kibana](https://discuss.elastic.co/t/error-while-installing-kibana/375287)
**Author:** [@n89n](https://discuss.elastic.co/u/n89n)\ **Replies:** 1\ **Last updated:** [March 2, 2025, 3:03pm UTC](https://discuss.elastic.co/t/error-while-installing-kibana/375287 "2025-03-02T15:03:46Z")
Hit:1 http://ru.archive.ubuntu.com/ubuntu noble InRelease Get:2 Index of /ubuntu noble-security InRelease \[126 kB\] Get:3 https://artifacts.elastic.co/packages/8.x/apt stable InRelease \[3,248 B\] Get:4 http://ru.archive… --- ## [Filtering Logs by Server Groups in Fleet-Managed Agents](https://discuss.elastic.co/t/filtering-logs-by-server-groups-in-fleet-managed-agents/375067)
**Author:** [@gaimes410](https://discuss.elastic.co/u/gaimes410)\ **Replies:** 6\ **Last updated:** [March 2, 2025, 12:04pm UTC](https://discuss.elastic.co/t/filtering-logs-by-server-groups-in-fleet-managed-agents/375067 "2025-03-02T12:04:50Z")
Hi everyone! In our R&D environment, we frequently create and destroy Windows and Linux servers, which we enroll into Fleet using the Elastic Agent. Each server group is assigned a randomly generated name that users rec… --- ## [Log messages not populated in Elasticsearch](https://discuss.elastic.co/t/log-messages-not-populated-in-elasticsearch/375101)
**Author:** [@rejiprn](https://discuss.elastic.co/u/rejiprn)\ **Replies:** 3\ **Last updated:** [March 2, 2025, 9:42am UTC](https://discuss.elastic.co/t/log-messages-not-populated-in-elasticsearch/375101 "2025-03-02T09:42:47Z")
Hi, following is my filebeat config and I am trying to push Kubernetes container logs to Elastic search, unfortunately log messages are not loaded . Could someone please help me what I am missing in my config? apiVersio… --- ## [Monitoring Multiple Windows Event Channels with Custom Event Logs in ELK Stack](https://discuss.elastic.co/t/monitoring-multiple-windows-event-channels-with-custom-event-logs-in-elk-stack/375134)
**Author:** [@ValentinL](https://discuss.elastic.co/u/ValentinL)\ **Replies:** 1\ **Last updated:** [March 2, 2025, 8:24am UTC](https://discuss.elastic.co/t/monitoring-multiple-windows-event-channels-with-custom-event-logs-in-elk-stack/375134 "2025-03-02T08:24:12Z")
Hello everyone, I have an ELK stack to monitor various Windows events. I monitor my agents with the Fleet server and integrations. I frequently use the "Custom Windows Event Logs" to target specific Event IDs I need. I… --- ## [Any update to snapshot repositoruy requires to restart ES cluster](https://discuss.elastic.co/t/any-update-to-snapshot-repositoruy-requires-to-restart-es-cluster/375182)
**Author:** [@Dharani\_Vattamwar](https://discuss.elastic.co/u/Dharani_Vattamwar)\ **Replies:** 1\ **Last updated:** [March 2, 2025, 5:43am UTC](https://discuss.elastic.co/t/any-update-to-snapshot-repositoruy-requires-to-restart-es-cluster/375182 "2025-03-02T05:43:05Z")
We have observer that if we perform any change to snapshot repository or even hit a simple update repository API with exactly same setting we observe connection pool shutdown error or repository inaccessible error which … --- ## [Stack monitoring Ingest Pipeline dashboard 404](https://discuss.elastic.co/t/stack-monitoring-ingest-pipeline-dashboard-404/370846)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 3\ **Last updated:** [March 2, 2025, 5:19am UTC](https://discuss.elastic.co/t/stack-monitoring-ingest-pipeline-dashboard-404/370846 "2025-03-02T05:19:07Z")
I'm ECE 8.16.0, in the Stack Monitoring section, after going to Nodes, there is a tab for Ingest Pipelines, but it gets a 404 error. Does it work for anyone? Thanks --- ## [Question about Cross Cluster Search and use of AI Assistant between clusters with different licenses](https://discuss.elastic.co/t/question-about-cross-cluster-search-and-use-of-ai-assistant-between-clusters-with-different-licenses/375212)
**Author:** [@iTiago](https://discuss.elastic.co/u/iTiago)\ **Replies:** 1\ **Last updated:** [March 1, 2025, 5:06pm UTC](https://discuss.elastic.co/t/question-about-cross-cluster-search-and-use-of-ai-assistant-between-clusters-with-different-licenses/375212 "2025-03-01T17:06:51Z")
We are currently operating two self-managed Elasticsearch clusters: Cluster 1: With a Basic license. Cluster 2: With a Commercial Subscription that includes Machine Learning capabilities and access to AI Assistant. We… --- ## [How to make Permanent data view of custom indexes](https://discuss.elastic.co/t/how-to-make-permanent-data-view-of-custom-indexes/374795)
**Author:** [@Eshwar\_K](https://discuss.elastic.co/u/Eshwar_K)\ **Replies:** 3\ **Last updated:** [March 1, 2025, 5:04pm UTC](https://discuss.elastic.co/t/how-to-make-permanent-data-view-of-custom-indexes/374795 "2025-03-01T17:04:34Z")
Hi Community, We had created a customer index for one of our requirement and ingesting the data to the custom index. hence, we can see data is ingesting into custom index whenever we are running the script. However, we … --- ## [Elasticsearch fails to register the repository but succeeds after retry](https://discuss.elastic.co/t/elasticsearch-fails-to-register-the-repository-but-succeeds-after-retry/375271)
**Author:** [@wei.guo](https://discuss.elastic.co/u/wei.guo)\ **Replies:** 1\ **Last updated:** [March 1, 2025, 4:23pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-register-the-repository-but-succeeds-after-retry/375271 "2025-03-01T16:23:23Z")
The issue is only on repository on Zadara. Error: "type": "repository\_verification\_exception", "reason": "\[index\_test\_1634127279\] \[\[wZIWLWCURDCiCRy6B6tClw, 'RepositoryVerificationException\[\[index\_test\_1634127279\] Failed… --- ## [Filebeat DaemonSet Fails with "Data Path Already Locked" Error](https://discuss.elastic.co/t/filebeat-daemonset-fails-with-data-path-already-locked-error/375217)
**Author:** [@DEVKUSHAL](https://discuss.elastic.co/u/DEVKUSHAL)\ **Replies:** 7\ **Last updated:** [March 1, 2025, 1:50pm UTC](https://discuss.elastic.co/t/filebeat-daemonset-fails-with-data-path-already-locked-error/375217 "2025-03-01T13:50:34Z")
I am encountering a persistent issue with Filebeat in my Kubernetes cluster. I have deployed Filebeat as a DaemonSet across nodes, but all Filebeat pods fail to start with the following error: Exiting: data path already… --- ## [Getting other pods nginx log to Beats in ECK](https://discuss.elastic.co/t/getting-other-pods-nginx-log-to-beats-in-eck/375259)
**Author:** [@Cedric\_Rochefolle](https://discuss.elastic.co/u/Cedric_Rochefolle)\ **Replies:** 2\ **Last updated:** [March 1, 2025, 2:57pm UTC](https://discuss.elastic.co/t/getting-other-pods-nginx-log-to-beats-in-eck/375259 "2025-03-01T14:57:31Z")
I have followed the ECK documents to configure Elasticsearch, Kibana, logstash and filebeat on my kubernetes cluster (it's a k3s home cluster) The Filebeat configuration I followed from here then I create the following… --- ## [Sending nginx logs from other pods to an ECK elasticsearch via Beats](https://discuss.elastic.co/t/sending-nginx-logs-from-other-pods-to-an-eck-elasticsearch-via-beats/375265)
**Author:** [@Cedric\_Rochefolle](https://discuss.elastic.co/u/Cedric_Rochefolle)\ **Replies:** 1\ **Last updated:** [March 1, 2025, 2:01pm UTC](https://discuss.elastic.co/t/sending-nginx-logs-from-other-pods-to-an-eck-elasticsearch-via-beats/375265 "2025-03-01T14:01:24Z")
I have followed the ECK quickstart and can get to run a 3 replicas of Elasticsearch on my k8s cluster, and kibana as well. Next step is to configure filebeat and logstash to capture the nginx logs from my other pods in … --- ## [Search-as-you-type Optimization: How to boost the First N-Gram for More Accurate Results](https://discuss.elastic.co/t/search-as-you-type-optimization-how-to-boost-the-first-n-gram-for-more-accurate-results/375264)
**Author:** [@Crout](https://discuss.elastic.co/u/Crout)\ **Replies:** 0\ **Last updated:** [March 1, 2025, 11:39am UTC](https://discuss.elastic.co/t/search-as-you-type-optimization-how-to-boost-the-first-n-gram-for-more-accurate-results/375264 "2025-03-01T11:39:27Z")
Hello everyone, I have been trying to improve my search for a while now I am searching for names with the help of search\_as\_you\_type and a mixture of match\_phrase and the math\_phrase\_prefix. the search itself works wond… --- ## [Logstash: Can we add http inputs dynamically in a filter section to config file from env variables](https://discuss.elastic.co/t/logstash-can-we-add-http-inputs-dynamically-in-a-filter-section-to-config-file-from-env-variables/375200)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 8\ **Last updated:** [March 1, 2025, 12:40am UTC](https://discuss.elastic.co/t/logstash-can-we-add-http-inputs-dynamically-in-a-filter-section-to-config-file-from-env-variables/375200 "2025-03-01T00:40:46Z")
Hello, Logstash: Can we add http inputs dynamically in a filter section to config file from env variables. Here is my requirement: Below filter contains the URL to get Prometheus data for a server endpoint. Now I need … --- ## [Filebeat - Send Only File Metadata Without Reading Content](https://discuss.elastic.co/t/filebeat-send-only-file-metadata-without-reading-content/374506)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 1\ **Last updated:** [March 1, 2025, 3:33am UTC](https://discuss.elastic.co/t/filebeat-send-only-file-metadata-without-reading-content/374506 "2025-03-01T03:33:46Z")
Hello, I am trying to configure Filebeat to send only the metadata of encountered files, specifically the \[log\]\[file\]\[path\] field. My Requirements: I only need the file path (\[log\]\[file\]\[path\]), not the content. I do n… --- ## [Elastic-agent-complete-\>x509: certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-complete-x509-certificate-signed-by-unknown-authority/375081)
**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\ **Replies:** 10\ **Last updated:** [March 1, 2025, 3:25am UTC](https://discuss.elastic.co/t/elastic-agent-complete-x509-certificate-signed-by-unknown-authority/375081 "2025-03-01T03:25:47Z")
Hi all, i am following this -\> Monitor resources on private networks | Elastic Observability \[8.16\] | Elastic sudo docker run \\ --env FLEET\_ENROLL=1 \\ --env FLEET\_URL=https://elastic:8220 \\ --env FLEET\_ENROLLMENT… --- ## [Warning is observed huge number of times 'input V2 factory.CheckConfig failed to clone config before checking it. Original config will be checked, it might trigger an input duplication warning: failed to get 'id': missing field accessing 'id''](https://discuss.elastic.co/t/warning-is-observed-huge-number-of-times-input-v2-factory-checkconfig-failed-to-clone-config-before-checking-it-original-config-will-be-checked-it-might-trigger-an-input-duplication-warning-failed-to-get-id-missing-field-accessing-id/374722)
**Author:** [@Sunanda](https://discuss.elastic.co/u/Sunanda)\ **Replies:** 1\ **Last updated:** [February 28, 2025, 9:43pm UTC](https://discuss.elastic.co/t/warning-is-observed-huge-number-of-times-input-v2-factory-checkconfig-failed-to-clone-config-before-checking-it-original-config-will-be-checked-it-might-trigger-an-input-duplication-warning-failed-to-get-id-missing-field-accessing-id/374722 "2025-02-28T21:43:59Z")
There is one small clarification needed regarding the below warning. Actually, when autodiscover is enabled and tried to deploy the service, we see the below warning repeated continuously with huge number of occurrences… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=93) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=95)